Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File:                     vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier:          JWF0tQqjZpOI4Umhm0BEgre+2tLdOGjIBLi6LnhdCxk=
Subject key identifier:   0B:D9:CC:EA:FB:F0:C8:05:C2:02:61:05:35:8B:16:E2:4D:F0:92:63
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       019F90FF304E8E40D6175E1E6EE6D88B9D87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number:          153F
Signing time:             Thu 23 Jul 2026 22:01:10 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:10 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:10 +0000
Files and hashes:         1: 4K_95KFZWMhbPpIfz5E1jHBv5aw.roa (hash: S+/oi+d3olEq6tAFWe3He8qCofTZg2SAbS0y1lTVFbQ=)
                          2: 8JHe7AaBIPNauRvBmwgzSlc2Olk.roa (hash: +p1NTN9tpOnp47raavb228o9/rb5/ylv96jkBXGbTHQ=)
                          3: 9Yph-pozsAa1u8D3EORz5KZEkck.roa (hash: eBaChJ/lL8SbnPpF1SLCUTRSIb4xLZthmgzcZwPUd1M=)
                          4: AEunzLWh3gsHOrYJNXhTSiOnqEU.roa (hash: a+6FwmOlMr9S4qz3PdaxvAJ+0nFrNrSk/lgCkrtBWLw=)
                          5: BmzDco6FUeR2pV7CetfxwgyZzwU.roa (hash: 3e8ATRNUbcI+nS1vmGLQB8ObHNnkxsHOjtgJ15KBPNU=)
                          6: EGTr11Cn33WgsBkSO-DW_brv2pQ.roa (hash: WbBfhfc/J57F6babpd8iRrGBrz8Jx8j1fD8g8nHbBpM=)
                          7: H1emVUICE2XmoUB3lCjzmQnd6Ak.roa (hash: OQbtHQhbOceKidpOYtukQNjTxgTngWpdYul9lp5ld+E=)
                          8: HoTv0sdQLHBWRiUvVVDaAHr5gZE.roa (hash: DIU7NFLXWQYLWOK2aoJC+a/KoOz45jlF8l8WQecGPFM=)
                          9: IADu_a3hKXhr1Hf3Wxg7vE9pXSw.roa (hash: y5tfLHXKWazA7AwML4TwjE9ej8TsMaQiHDfSzy/WlnI=)
                          10: MSktJCjRKQDGOhyyr4mKUY-X9I0.roa (hash: YB2yhni5jmhv5LOS3OBNxLtMUZLfwVnpogHoPFW8JJc=)
                          11: OJCWpsxNbupszt0IJQ7GmjOPuU4.roa (hash: emoVCpaFA4Kcns27J7+DwGk3hNm6T2TOcgu0xzbdja8=)
                          12: Q7sGk7ECwFV3meUPYImkro5mZn8.roa (hash: yPT2eaBvSLQfJfLB4jWSat0V9vFdL71JwO3EoW7qPCQ=)
                          13: QkokzrYDGI69z71ocapb49HcmMw.roa (hash: BPEQLv+L5DDtagemk+MXVy03tCKM+xoA01OlIV162OU=)
                          14: TBbYZVnRjlYXHQAtPcfmE7zFNhc.roa (hash: gwN06t/I7Jawt3LQMpSh1ruXZaJYB/QUXUCidscAwp0=)
                          15: ThdY1NGqdEAlbacIpCzIWWjl8-M.roa (hash: VhQ5Tvljs/taZI++HCXLozJ3N8a0YMuM7YHVXeQMk0Y=)
                          16: YrfvxNJdeHYuSdfjBibJ7k6pvEE.roa (hash: oBcJN0/vUgerckttMrITgGrAWVOsR/md3WZHA4+tgo0=)
                          17: ZDSoVMaxuelayYkHDT1Cece0cLM.roa (hash: YJ9/iqfEmNXXNYGq5w6yN8VfwFD7csp8PUDUTe1uRmA=)
                          18: _w6riE4OlRprr7MI-yGnTko28Sg.roa (hash: Gwzb8KH6//hbsd3+z42M1mtGTl+aF6C5ToJY0z33ZFs=)
                          19: jlOSteO5B4HlUDCHpcrOn1tZyw8.roa (hash: PNBhGbv1owj//wNV6ueV101gABFDOCaZFzVqrXAhf8s=)
                          20: oBNWk0ANrXJFnqpqi8qJWun9bTg.roa (hash: ersLK1F7q7UrsdCXpRyyrcybt+NPvXoXFfuofv9kyjc=)
                          21: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: NIkWrhgY0wjqRNtFhKGgvxnRiZTrnC4FW50FHx43tNQ=)
                          22: w3qodbcoa2ZvgoDJeO5ygCI2aAk.roa (hash: LAkyIylHnXBQNUrOi88pTzQDfdyi1/aUJB7HDCmUEbo=)
                          23: wfh-UOAZf8zXcfnGgtljGrgtW4Y.roa (hash: v/XrCw+3zSPx3FlcLzuKPWemLUh1+me4/h0qQHJfqdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:30:4e:8e:40:d6:17:5e:1e:6e:e6:d8:8b:9d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: Jul 23 22:01:10 2026 GMT
            Not After : Jul 24 22:01:10 2026 GMT
        Subject: CN=0bd9cceafbf0c805c2026105358b16e24df09263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:69:bb:de:1c:d5:69:1a:78:6b:9d:81:36:
                    15:b1:c8:c1:d1:a7:b8:cb:46:e5:c2:c5:4a:11:f9:
                    dd:00:ba:84:49:c2:d3:66:3a:f4:ab:20:7e:f1:28:
                    c9:53:8c:f6:b4:be:14:8e:90:bc:40:ab:7c:f0:73:
                    67:dc:72:78:73:62:c3:00:f2:3a:6e:0b:7f:69:ca:
                    c6:66:a1:d2:d5:0c:f1:6d:55:4a:c1:be:b3:83:84:
                    b8:27:15:d8:de:af:0a:e8:21:63:3c:91:de:ed:b3:
                    3f:94:c2:8f:90:96:d3:99:92:0f:ba:a4:1b:c5:62:
                    ef:4c:39:e0:a5:7d:6d:38:60:62:0c:a8:56:f7:71:
                    07:42:76:80:57:98:74:4f:9d:8c:18:e9:6e:dc:60:
                    38:50:54:2b:35:a2:17:85:cc:70:0b:d6:87:1b:c7:
                    a5:0a:36:14:3d:fb:21:6b:32:10:7d:5c:ee:dc:0c:
                    70:82:2d:f5:ba:43:90:99:a5:66:e6:ac:11:60:d7:
                    8d:e2:df:dd:84:81:5a:72:18:31:e4:00:3e:61:b8:
                    f3:b9:be:fe:3e:a4:ac:35:03:06:eb:e9:bf:0c:99:
                    1c:1e:40:f9:e6:92:a2:4d:06:d4:ea:05:8c:9a:26:
                    4f:c5:7f:68:4a:72:77:75:94:02:06:61:e0:28:dd:
                    37:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D9:CC:EA:FB:F0:C8:05:C2:02:61:05:35:8B:16:E2:4D:F0:92:63
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:26:b3:52:27:d8:8c:f3:aa:a7:2a:a8:38:03:b2:71:35:ab:
         b1:46:14:76:fb:76:f9:f8:fb:85:5c:b1:c1:bd:8e:ad:35:f6:
         3c:cf:dd:ac:e5:f6:b8:29:26:c9:e9:71:20:04:9a:13:ed:09:
         93:78:66:37:c1:22:3f:a2:af:aa:01:aa:b6:20:b7:0e:c7:13:
         11:79:23:5c:d2:9e:94:b5:49:0d:62:73:fb:34:47:66:82:a9:
         9d:79:b7:44:3c:3c:fe:ef:20:0a:23:84:9a:ae:b7:90:17:f5:
         01:2e:d4:26:88:7d:b6:63:18:95:f7:00:a9:15:0c:78:35:ad:
         9c:44:88:ed:a0:16:9e:0b:1a:54:7a:31:77:d9:83:de:0b:63:
         42:7d:cc:72:29:ff:0d:09:4f:13:b6:5e:7e:fd:f6:b6:9e:8e:
         23:86:52:65:0f:7e:c6:83:fa:be:f9:69:07:1c:80:9e:e8:15:
         9e:3d:76:b1:18:99:75:db:be:7e:ef:1f:bf:0a:d5:c1:dd:57:
         ee:df:a1:8d:97:45:75:e2:ce:ee:d2:c8:43:0d:8b:22:ee:9b:
         50:76:49:4a:e6:f4:ac:37:75:ab:b2:6d:bb:19:62:f8:5a:68:
         80:24:84:79:ab:1d:85:a8:cc:99:3c:48:fe:f8:64:6b:52:2a:
         f0:1c:36:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:24 2026 by rpki-client